✏️ 正在编辑: authentication.cpython-312.pyc
路径:
/var/opt/nydus/ops/mysql/connector/aio/__pycache__/authentication.cpython-312.pyc
提示:
您可以编辑任何文件（包括二进制文件），但请注意不当修改可能导致文件损坏。
� ��'j�2 � �� � d Z ddlmZ dgZddlmZmZmZmZ ddl m Z m Z m Z ddl mZmZmZmZmZmZmZ ddlmZ d d lmZ d d lmZmZ d d l mZ erd d l m Z G d� d� Z y)z6Implementing support for MySQL Authentication Plugins.� )� annotations�MySQLAuthenticator)� TYPE_CHECKING�Any�Dict�Optional� )�InterfaceError�NotSupportedError� get_exception)�AUTH_SWITCH_STATUS�DEFAULT_CHARSET_ID�DEFAULT_MAX_ALLOWED_PACKET� ERR_STATUS�EXCHANGE_FURTHER_STATUS� MFA_STATUS� OK_STATUS)� HandShakeType� )�logger)�MySQLAuthPlugin�get_auth_plugin)� MySQLProtocol)� MySQLSocketc � � e Zd ZdZdd�Zedd�� Zedd�� Zdd�Z d dd�Z dd�Z dd �Z d d d d de d d e dddd ddf dd �Zy)r z$Implements the authentication phase.c �X � d| _ i | _ i | _ d| _ d| _ d| _ y)z Constructor.� FN)� _username� _passwords�_plugin_config� _ssl_enabled�_auth_strategy�_auth_plugin_class��selfs �S/opt/nydus/tmp/pip-target-k0fmikie/lib/python/mysql/connector/aio/authentication.py�__init__zMySQLAuthenticator.__init__; s0 � � ���*,���.0���"'���9=���15�� � c � � | j S )z&Signals whether or not SSL is enabled.)r! r$ s r& � ssl_enabledz MySQLAuthenticator.ssl_enabledD s � � � � � r( c � � | j S )a� Custom arguments that are being provided to the authentication plugin. The parameters defined here will override the ones defined in the auth plugin itself. The plugin config is a read-only property - the plugin configuration provided when invoking `authenticate()` is recorded and can be queried by accessing this property. Returns: dict: The latest plugin configuration provided when invoking `authenticate()`. )r r$ s r& � plugin_configz MySQLAuthenticator.plugin_configI s � � �"�"�"r( c �: � | j j |� y)z,Update the 'plugin_config' instance variableN)r �update)r% �configs r& �update_plugin_configz'MySQLAuthenticator.update_plugin_configZ s � � ���"�"�6�*r( Nc �� � |� | j }|� | j }t j d|� t ||�� || j j |d� | j �� | _ y)a� Switch the authorization plugin. Args: new_strategy_name: New authorization plugin name to switch to. strategy_class: New authorization plugin class to switch to (has higher precedence than the authorization plugin name). username: Username to be used - if not defined, the username provided when `authentication()` was invoked is used. password_factor: Up to three levels of authentication (MFA) are allowed, hence you can choose the password corresponding to the 1st, 2nd, or 3rd factor - 1st is the default. NzSwitching to strategy %s)� plugin_name�auth_plugin_classr )r* ) r r# r �debugr r �getr* r" )r% �new_strategy_name�strategy_class�username�password_factors r& �_switch_auth_strategyz(MySQLAuthenticator._switch_auth_strategy^ sq � �& � ��~�~�H� � !� !� 4� 4�N�� � �/�1B�C� �o�)�^� � � �O�O� � ��� 4� �(�(� ��r( c � �� K � d}|d t k( �r=|| j vr t d� �t j |� \ }}| j ||�� t j d|| j j � | j j ||fi | j ��� d{ ��� }|d t k( rEt j |� } | j j ||fi | j ��� d{ ��� }|d t k( rt j d� |S |d t k( r t# |� �|dz }|d t k( r��=t j$ d � y7 ��7 �i�w) a Handle MFA (Multi-Factor Authentication) response. Up to three levels of authentication (MFA) are allowed. Args: sock: Pointer to the socket connection. pkt: MFA response. Returns: ok_packet: If last server's response is an OK packet. None: If last server's response isn't an OK packet and no ERROR was raised. Raises: InterfaceError: If got an invalid N factor. errors.ErrorTypes: If got an ERROR response. r � z5Failed Multi Factor Authentication (invalid N factor))r9 zMFA %i factor %sNzMFA completed succesfullyr z"MFA terminated with a no ok packet)r r r r �parse_auth_next_factorr: r r4 r" �name�auth_switch_responser r �parse_auth_more_data�auth_more_responser r r �warning)r% �sock�pkt�n_factorr6 � auth_datas r& � _mfa_n_factorz MySQLAuthenticator._mfa_n_factor� si � �� �* ���!�f� �"��t���.�$�K�� � ,9�+O�+O�PS�+T� (� �y� � &� &�'8�(� &� S� �L�L�+�X�t�7J�7J�7O�7O� P�@��+�+�@�@��i��#'�#6�#6�� �C� �1�v�0�0� )� >� >�s� C� � B�D� /� /� B� B��)� �'+�':�':� � �� �1�v��"�� � � 8�9�� ��1�v��#�#�C�(�(� ��M�H�7 �!�f� �"�: ���;�<��)�� �s, �B*E)�,E%�-AE)�=E'�>AE)�E)�'E)c � � K � |d t k( rt |� dk( r t d� �|d t k( rnt j d� t j |� \ }}| j |� | j j ||fi | j ��� d{ ��� }|d t k( rZt j d� t j |� } | j j ||fi | j ��� d{ ��� }|d t k( r,t j d| j j � |S |d t k( rYt j d� t j d | j j � | j# ||� � d{ ��� S |d t$ k( r t' |� �y7 �� 7 ��7 �!�w) a� Handle server's response. Args: sock: Pointer to the socket connection. pkt: Server's response after completing the `HandShakeResponse`. Returns: ok_packet: If last server's response is an OK packet. None: If last server's response isn't an OK packet and no ERROR was raised. Raises: errors.ErrorTypes: If got an ERROR response. NotSupportedError: If got Authentication with old (insecure) passwords. r< � z�Authentication with old (insecure) passwords is not supported. For more information, lookup Password Hashing in the latest MySQL manualz+Server's response is an auth switch requestNzExchanging further packetsz%s completed succesfullyz$Starting multi-factor authenticationzMFA 1 factor %s)r �lenr r r4 r �parse_auth_switch_requestr: r" r? r r r@ rA r r> r rG r r )r% rC rD r6 rF s r& �_handle_server_responsez*MySQLAuthenticator._handle_server_response� s� � �� �& �q�6�'� '�C��H��M�#�>�� � �q�6�'� '� �L�L�F� G�+8�+R�+R�SV�+W� (� �y� � &� &�'8� 9�@��+�+�@�@��i��#'�#6�#6�� �C� �q�6�,� ,� �L�L�5� 6�%�:�:�3�?�I�>��+�+�>�>��i��#'�#6�#6�� �C� �q�6�Y� � �L�L�3�T�5H�5H�5M�5M� N��J� �q�6�Z� � �L�L�?� @� �L�L�*�D�,?�,?�,D�,D� E� �+�+�D�#�6�6� 6� �q�6�Z� � ��$� $��/���� 7�s8 �BG� F=� A%G�G �B G� G�! G� G�Gr r Fc � � K � || _ |||d�| _ | | _ | | _ t j |||||| | | | ||| j | j �� \ }| _ |rdd|fndd|f} |j |g|��� � d{ ��� t |j |� � d{ ��� � }| j ||� � d{ ��� }|� t d� d�|S 7 �P7 �47 ��w)a� Perform the authentication phase. During re-authentication you must set `is_change_user_request` to True. Args: sock: Pointer to the socket connection. handshake: Initial handshake. username: Account's username. password1: Account's password factor 1. password2: Account's password factor 2. password3: Account's password factor 3. database: Initial database name for the connection. charset: Client charset (see [1]), only the lower 8-bits. client_flags: Integer representing client capabilities flags. ssl_enabled: Boolean indicating whether SSL is enabled, max_allowed_packet: Maximum packet size. auth_plugin: Authorization plugin name. auth_plugin_class: Authorization plugin class (has higher precedence than the authorization plugin name). conn_attrs: Connection attributes. is_change_user_request: Whether is a `change user request` operation or not. read_timeout: Timeout in seconds upto which the connector should wait for the server to reply back before raising an ReadTimeoutError. write_timeout: Timeout in seconds upto which the connector should spend to send data to the server before raising an WriteTimeoutError. Returns: ok_packet: OK packet. Raises: InterfaceError: If OK packet is NULL. ReadTimeoutError: If the time taken for the server to reply back exceeds 'read_timeout' (if set). WriteTimeoutError: If the time taken to send data packets to the server exceeds 'write_timeout' (if set). References: [1]: https://dev.mysql.com/doc/dev/mysql-server/latest/ page_protocol_basic_character_set.html#a_protocol_character_set )r r � ) � handshaker8 �password�database�charset� client_flags�max_allowed_packet� auth_pluginr3 � conn_attrs�is_change_user_requestr* r, r NzGot a NULL ok_pkt)r r r! r# r � make_authr* r, r" �write�bytes�readrL r )r% rC rO r8 � password1� password2� password3rQ rR rS r* rT rU r3 rV rW � read_timeout� write_timeout�response_payload� send_argsrD �ok_pkts r& � authenticatez MySQLAuthenticator.authenticate� s � �� �z "��� '�I�)�D��� '���"3�� � 1>�0G�0G� � � � ��%� 1�#� /�!�#9� �(�(� �,�,�1 �-��$�-�& &� ��=� !���m�,� � �d�j�j�)�6�I�6�6�6� �$�)�)�L�1�1�2���3�3�D�#�>�>�� �>� �!4�5�4� ?�� � 7�� 2��>�s6 �BC�C� C�!C�" C�?C� C�C�C)�return�None)re �bool)re �Dict[str, Any])r/ rh re rf )NNr ) r6 �strr7 � Optional[str]r8 rj r9 �intre rf )rC r rD rZ re zOptional[bytes])$rC r rO r r8 ri r\ ri r] ri r^ ri rQ rj rR rk rS rk r* rg rT rk rU rj r3 rj rV zOptional[Dict[str, str]]rW rg r_ � Optional[int]r` rl re rZ )�__name__� __module__� __qualname__�__doc__r' �propertyr* r, r0 r: rG rL r r rd � r( r& r r 8 s� � �.�6� �!� �!� �#� �#� +� )-�"&� � � � � &� � � � � � � �D4��4� �4� � 4�l5��5� �5� � 5�v ����"&�)� � !�"<�%)�+/�/3�',�&*�'+�%b��b� !�b� � b� � b� � b� �b� �b� �b� �b� �b� �b� #�b� )� b� -� b� !%�!b�" $�#b�$ %�%b�& �'br( N) rp � __future__r �__all__�typingr r r r �errorsr r r �protocolr r r r r r r �typesr r �pluginsr r r �networkr r rr r( r& �<module>r{ sP ��: =� "� � �� 5� 5� E� E�� � � "� � 5� #��$�W� Wr(
💾 保存文件
← 返回文件管理器